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A system and method for providing a trusted 



server which controls access to the execution of 
processes by applying file level extended 
sensitivity label attributes (202). The attributes 
are utilized to restrict execution of processes 
(250) that are requested by comparing the 
extended attributes (200) in addition to using 
standard file permission authorization. The 
system additionally may be used to provide 
controlled execution of commercially available 
software. 
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